Hi; What we have done about this is simple. We created a filter file with:
ALLRECIPS 0 CONTAINS Xemployees email & set the action to delete This filter file is only the emails we see in our log files that are constantly getting email and the emails are either no longer valid or they have never existed.. My favorites are: [EMAIL PROTECTED] This email receives email everyday.. It is the most popular guy at our company... ALLRECIPS has the benefit that if anyone in the To or CC has this address the email gets treated with our action. We have a DELETE action on this filter. The way we see it if [EMAIL PROTECTED] & [EMAIL PROTECTED] are in the same To field chances are quite high that the email is spam. So that takes care of this. I wish there was a way that Imail would refuse email from senders that do not exist. For example: [EMAIL PROTECTED] can not be in the from address since Imail should know the domain is local and that user does not exist and it should outright reject it and refuse connection. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, August 29, 2003 6:07 PM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.JunkMail] Possible test suggestion Chuck, that suggestion could be useful for me, but I can two bits... I've noticed that some legitimate bulk mailers, like spammers, are completely brain dead when it comes to removing e-mail addresses that have bounced. For example, I saw a spammer consistently using an address that hadn't existed for 5 years in my domain. So now it's a spam trap, but it wasn't just getting spam, it was still getting catalog flyers, "service updates" for a cell phone that would be long gone, and some other member news kind of stuff. This bad behaviour on their part wouldn't invalidate the test you're suggesting, but it would make me give it a moderate weight. The other false positive I can easily see would be spelling errors. Happens all the time. -----Original Message----- From: Charles Frolick [mailto:[EMAIL PROTECTED] Sent: Friday, August 29, 2003 2:07 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Possible test suggestion I'm trying to remember if this has been suggested before, couldn't seem to find anything in the archives (probably bad search terms). How about a test similar to MAILFROM but it checks the intended recipients of all local domains and fails if any of them are invailid, ignoring the nobody alias. It could even return the count as weight or a multiplier of count as weight. I can't think of a reason legitimate mail will have more than a couple outside of a mailing list, which, if I'm remembering right, generally only uses single recipients. Pros, cons, extensions? Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
